https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 14:11:42 +0000 https://vulnerability.circl.lu/vuln/cnvd-2018-05430 cnvd-2018-05430 https://vulnerability.circl.lu/vuln/cnvd-2018-05430 https://vulnerability.circl.lu/vuln/fkie_cve-2018-6536 <p>An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for icinga2.pid modification before a root script executes a &#34;kill `cat /pathname/icinga2.pid`&#34; command, as demonstrated by icinga2.init.d.cmake.</p> <p>An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for icinga2.pid modification before a root script executes a &#34;kill `cat /pathname/icinga2.pid`&#34; command, as demonstrated by icinga2.init.d.cmake.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2018-6536 https://vulnerability.circl.lu/vuln/ghsa-653v-x44f-wmwh <p>An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for icinga2.pid modification before a root script executes a &#34;kill `cat /pathname/icinga2.pid`&#34; command, as demonstrated by icinga2.init.d.cmake.</p> <p>An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for icinga2.pid modification before a root script executes a &#34;kill `cat /pathname/icinga2.pid`&#34; command, as demonstrated by icinga2.init.d.cmake.</p> https://vulnerability.circl.lu/vuln/ghsa-653v-x44f-wmwh https://vulnerability.circl.lu/vuln/gsd-2018-6536 gsd-2018-6536 https://vulnerability.circl.lu/vuln/gsd-2018-6536 https://vulnerability.circl.lu/vuln/ubuntu-cve-2018-6536 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: icinga2, Ubuntu:18.04:LTS: icinga2, Ubuntu:20.04:LTS: icinga2, Ubuntu:22.04:LTS: icinga2, Ubuntu:24.04:LTS: icinga2, Ubuntu:25.10: icinga2, Ubuntu:26.04:LTS: icinga2</p> <p>An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for icinga2.pid modification before a root script executes a &#34;kill `cat /pathname/icinga2.pid`&#34; command, as demonstrated by icinga2.init.d.cmake.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: icinga2, Ubuntu:18.04:LTS: icinga2, Ubuntu:20.04:LTS: icinga2, Ubuntu:22.04:LTS: icinga2, Ubuntu:24.04:LTS: icinga2, Ubuntu:25.10: icinga2, Ubuntu:26.04:LTS: icinga2</p> <p>An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for icinga2.pid modification before a root script executes a &#34;kill `cat /pathname/icinga2.pid`&#34; command, as demonstrated by icinga2.init.d.cmake.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2018-6536